Overview
overview
7Static
static
3Scrum.Canv...up.exe
windows10-2004-x64
7Scrum.Canv...up.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3runtime/di...wVN.js
windows10-2004-x64
3runtime/di...wVN.js
windows11-ltsc_2024-x64
3runtime/di...x.html
windows10-2004-x64
3runtime/di...x.html
windows11-ltsc_2024-x64
3runtime/node.exe
windows10-2004-x64
1runtime/node.exe
windows11-ltsc_2024-x64
1runtime/no...DME.js
windows10-2004-x64
3runtime/no...DME.js
windows11-ltsc_2024-x64
3runtime/no...dex.js
windows10-2004-x64
3runtime/no...dex.js
windows11-ltsc_2024-x64
3runtime/no...les.js
windows10-2004-x64
3runtime/no...les.js
windows11-ltsc_2024-x64
3runtime/no...dex.js
windows10-2004-x64
3runtime/no...dex.js
windows11-ltsc_2024-x64
3runtime/no...lts.js
windows10-2004-x64
3runtime/no...lts.js
windows11-ltsc_2024-x64
3runtime/no...ies.js
windows10-2004-x64
3runtime/no...ies.js
windows11-ltsc_2024-x64
3runtime/no...dex.js
windows10-2004-x64
3runtime/no...dex.js
windows11-ltsc_2024-x64
3General
- Target Scrum.Canvas_1.0.2_x64-setup.exe
- Size 23.4MB
- Sample261110-n2hydsat3z
- SHA256 aeecf4cec1ed50d5804a1ce4a8a3821cbd2519b319a9d6d6328eb6f2642810ff
- MD5 5af936890ccf6ec91fb49b9e8eaeba08
- SHA1 52804ea2efc3c31301ab2d4cf1dd034c1b3656a8
- SHA512 5d051e3b05daf0298c10f38f9dee134776340447f01a66df3124a92a2819ad284d67b1f228750751cdb084496c03853883ca8c09c073d78348d694e13f5da411
- SSDEEP 393216:O/nPkZkF6CIYpXt98TYhnE3dH20+EPG20QLQjoxSfkFiEreybbSoGA1rsDN4LybF:OXkZkYCIQ9CEnEJ20+EPN/FiwnbSkYiS
- TLSH T11937336C17EC85B7D1E248BA0FE9593897E6B7102B440EBECB89371A58384D6C4E5C73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Scrum.Canvas_1.0.2_x64-setup.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Scrum.Canvas_1.0.2_x64-setup.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
runtime/dist/assets/index-BsRhcwVN.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
runtime/dist/assets/index-BsRhcwVN.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
runtime/dist/index.html
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
runtime/dist/index.html
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
runtime/node.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
runtime/node.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
runtime/node_modules/accepts/README.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
runtime/node_modules/accepts/README.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
runtime/node_modules/accepts/index.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
runtime/node_modules/accepts/index.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
runtime/node_modules/aws-ssl-profiles/lib/@types/profiles.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
runtime/node_modules/aws-ssl-profiles/lib/@types/profiles.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
runtime/node_modules/aws-ssl-profiles/lib/index.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
runtime/node_modules/aws-ssl-profiles/lib/index.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
runtime/node_modules/aws-ssl-profiles/lib/profiles/ca/defaults.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
runtime/node_modules/aws-ssl-profiles/lib/profiles/ca/defaults.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
runtime/node_modules/aws-ssl-profiles/lib/profiles/ca/proxies.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
runtime/node_modules/aws-ssl-profiles/lib/profiles/ca/proxies.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
runtime/node_modules/body-parser/index.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
runtime/node_modules/body-parser/index.js
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target Scrum.Canvas_1.0.2_x64-setup.exe
- Size 23.4MB
- SHA256 aeecf4cec1ed50d5804a1ce4a8a3821cbd2519b319a9d6d6328eb6f2642810ff
- MD5 5af936890ccf6ec91fb49b9e8eaeba08
- SHA1 52804ea2efc3c31301ab2d4cf1dd034c1b3656a8
- SHA512 5d051e3b05daf0298c10f38f9dee134776340447f01a66df3124a92a2819ad284d67b1f228750751cdb084496c03853883ca8c09c073d78348d694e13f5da411
- SSDEEP 393216:O/nPkZkF6CIYpXt98TYhnE3dH20+EPG20QLQjoxSfkFiEreybbSoGA1rsDN4LybF:OXkZkYCIQ9CEnEJ20+EPN/FiwnbSkYiS
- TLSH T11937336C17EC85B7D1E248BA0FE9593897E6B7102B440EBECB89371A58384D6C4E5C73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/NSISdl.dll
- Size 15KB
- SHA256 d3e61c4df837625ac0503cea5b6765a04d37fc35399899a5503b53a3108bfbf6
- MD5 7c8182ee99c93fc3a1bc41a52f5007ca
- SHA1 05e9155694fcb8eb928632265199a4c8b315021f
- SHA512 c1d4e5f86656b945442bae1386081d8ed225b6cea8161e1d061382fff58fc77261b88fce74a4292269ee8ea5ef4c032eee700b0dce48bb35c419a5cb9317c79e
- SSDEEP 384:8rSQMCOUILnCaSPy/yhJzmGSMRWyOUKi0:8rSQMCOp0yamMRWysi0
- TLSH T14C623D16B62084F5CBB2167034D73B3E6BB28F6A292848C34BF35C4E9E52307B675D85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 39870682e7d1c026cd2b33ca25591db28250dde17de7eb1feec404222d534ffc
- MD5 128e19d3f6bc32de40ee88a431cd4a5b
- SHA1 44cdb6a3bb285d6502888bc4aaa6fa951b059d1c
- SHA512 109d164db47ae525ad9361a28e9b3265977cfefef6504d456c8e0272f4b2ff70c534bbb5404ba7048a6895441b7a49012ab82a62785ec9ac45c24c6f2acaa135
- SSDEEP 96:8It3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/d3lkCTcaqHCI:thE+A0+sF6piUFkABlncviI
- TLSH T1D8F1B776F3D20673F9AB437428632F231B2AF521576981A6490316CE7A61DA3FE34B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 afe032f942e2ed0bf7494ec08ba813f5739fb522c640bde81d30ecaf9f894432
- MD5 564e01f2c6edfb8475573e1b809cb5eb
- SHA1 5d767e8f685449d86cd8d16c83a814ef8f7d6264
- SHA512 67486f8e996b29688cfb5a57ae4a7604fa0892ba0eeccdd55f514ca4bd9b79a6fe42bfab4fc85156c2258ae66539bdd9bb36a8b5f7f944f3007c2421f244c95c
- SSDEEP 192:rjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ80QPi:X/Qlt7wiij/lMRv/9V4b8r
- TLSH T1FD426C1297B089F2F551493419667F2A6FBEAC5D27F405A3CFE304C63D212DB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 9c76f4d53ceee2a471c936e0899688405e1009ce962d140e9acb49ed68d114cb
- MD5 79c27de4d1c6d295fefaa70f608f1c67
- SHA1 feba90c93db3fedd450a81eb2603f793332d1a83
- SHA512 fbd79f3946032821584ea2fa4b559ac5809ab45fdc9107eb47c9ff3fa3229d7748a7b2ed588709e59cce16a4f8e58ed98b46cb061acf1080e78434d184f51ec7
- SSDEEP 96:oQEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YbNqkzfFc:oQEvCu5e81785qHFcU0PuAw0uyBIFc
- TLSH T1E612E892A2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsis_tauri_utils.dll
- Size 33KB
- SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
- MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
- SHA1 75197fee3c6a814fe035788d1c34ead39349b860
- SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
- SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
- TLSH T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target runtime/dist/assets/index-BsRhcwVN.js
- Size 447KB
- SHA256 34b7b2cc347ec8ff788aca34581891b7a02589350aead77977cd5fd0aa5ea5cc
- MD5 eea3780c6678636fc9a38b1385e5e044
- SHA1 300dda0331ffc1e4bf33013a0e175ca590a5bcab
- SHA512 bffa9a1e985832ab09b2e4db9e778f7a675afe89c2beea7565299eb714c94250b3a0e63a7d57efc8d5a0e434a4717aff7340b6374c1801225571810ce5e36cef
- SSDEEP 12288:ryj0RXgerMEjW2wdYJ/JI1EfSY1uMK98HTnnUg+qzZAaJnYZAAU8acPRsjNaK/tU:rnRQerMEbJ/JIafSY1uMK98HTnnUg+qg
- TLSH T107A47DE431557AB9AFA705E5407F500AB23E2921B80D4860F16CDDAC3BB4146B1BBFDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target runtime/dist/index.html
- Size 518B
- SHA256 2d8f73bd262d853a67ecb8b936653ec811bd480463061cd8162c6d850f5b354b
- MD5 4f9bb1711595ad89f4304bbd31cbd99c
- SHA1 429a7071b411d371f435f04b176c4c25760ad05e
- SHA512 6221f6b60da2369f8109d5aa8ba35c56c7e8e33850fc015c8ec5bf1ec17655183aba6a055c2d61d2f28052c2001a6f0ddac15df9c530be55c60042a224e339bb
- TLSH T175F0598294D00C190370421C2DD1F11CEAB2A747560E6D0072EE21BB1FE6685CDCB569
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target runtime/node.exe
- Size 81.3MB
- SHA256 995a3fb3cefad590cd3f4b321532a4b9582fb9c6575320ed2e3e894caac3e362
- MD5 61836f92bd64c26a9a5e4e031857eddc
- SHA1 ea2bade68e538899ba92b9707a677b1f2c8f2979
- SHA512 4bf7e9862baa4d63504fb68f272287b54d560fadf80bcd50e97f6e9b8415a3587cd3e62fd9c85aa9711d539727a410529cdf32dea17bbe4a936a367a12b275e2
- SSDEEP 786432:CgQK2OglVjTRjK3fYJGPnfI3XSHpgPVlcm1o/M:C9K2OajTRK3ATz
- TLSH T174187C5263A609D5F9F79A348AE65213DA73BC063F3082DF324C172A1F736E04976B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target runtime/node_modules/accepts/README.md
- Size 4KB
- SHA256 e7969a08a5e6d6c4ea8063941275554e51e146113cb0ae51a94060268b68b7d3
- MD5 017b3fff5b8b131576fcdda7e5ceaa5e
- SHA1 b6f3180b9b08b04c5281685ac9437f2d7a5ad810
- SHA512 805be8250c5e693c23ad0759966601bd155c4f233d6e23ff8ff36b94518673c1502b8d752bd003dad804250ea2c98e94570f246152a9bcdef0f162e287442211
- SSDEEP 48:ZdC9AIvI6RZK0nwuBGWxGWwsNdXMoNjP601Wrk0aN8F07DaN89JC7aN8fBfuRhpc:/CnQl0JZ15jue/9IQxfkXjwiA0
- TLSH T1828174E323C156F76B03166FAD8FB798E325C42E91369890F1AC856C36C5A29C1732C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target runtime/node_modules/accepts/index.js
- Size 5KB
- SHA256 541417f7331d7c2041a7ac3e58df6198d6ebc0df04c4cbb2148de719b1dc4edc
- MD5 007ec0db04c56661fc672774c31c95d1
- SHA1 db67d55b97c34d04f65e7a91caa32f6c21be86a2
- SHA512 2ad3432ac98b9d2785217312f6a8b09cced2d8f13afe0e137939f7709cca294303e9cbb339b36f7bc9d662868379e1639b6339a4a278e6a4ace1cb150d6f7a14
- SSDEEP 96:oYG1MGmGHqyl8rAyBkmqFxo+uerpDWMlB8fdOGUJTit4UG9bCZhPw1:oYG1Xlqyl88yBD+uerRLD0YQ4rcZhq
- TLSH T1ABB1328535DAB096974310B09ECFE749F035840B312BECA1F19D73B42FD1EAA8255EB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target runtime/node_modules/aws-ssl-profiles/lib/@types/profiles.js
- Size 77B
- SHA256 d43aa81f5bc89faa359e0f97c814ba25155591ff078fbb9bfd40f8c7c9683230
- MD5 8963201168a2449f79025884824955f2
- SHA1 b66edae489b6e4147ce7e1ec65a107e297219771
- SHA512 7f65c6403a23d93fb148e8259b012d6552ab3bff178f4a7d6a9d9cec0f60429fc1899e39b4bca8cc08afc75d9a7c7bfdb13fc372ca63c85eb22b0355eb4d6000
- TLSH T163A01201692185E003A000C84111E0C1A0C104320025286557EC4D65440084C5060201
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target runtime/node_modules/aws-ssl-profiles/lib/index.js
- Size 438B
- SHA256 4bcda47ea0d35bec8b9e4719206661b26204a000a0d5f06a18959b85186f9430
- MD5 148589997f7daa23a1d2c537e5733eba
- SHA1 ca8232e60a15e66728641f855f2ece79f5184984
- SHA512 e53488c38f7032ee6823b86b95423f8e23ae6b481584be5b6267cdb1b70f54d61839d2cc13194070711a2e317c0877c8c503da28563dc41a884834b4160f8be3
- TLSH T150F0E59BE8B5B552016C7CD0F1D241632CD6C97F718774E003DC8A9D17168D454D0BB7
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target runtime/node_modules/aws-ssl-profiles/lib/profiles/ca/defaults.js
- Size 209KB
- SHA256 c3667ba6c7e502e2213602948d37bbbfd000aebeb88b787d7e267fd580892469
- MD5 16acee0b02a2a4221f4c59308154d7e8
- SHA1 e5ebcee761c807a9b1fef7201942a8883ea10505
- SHA512 e41c8fa1a7827985ef97cc7d73b4d8e4f2389b7b9a392b700e6f08544f3a58f56030613c4a237048ffb017f3e80fb87a957b8d6318d32d836c810f3a6ff92a07
- SSDEEP 3072:wX0MAd0jx+iBbUGITrDWnujwVz4MZHDiUJwBfVFsBbHTejVuKPFMm9OSLI5a5ntp:Aimji2V8s63ry7wIo4vsk2h
- TLSH T1862407A65E03287DB483D0C3C7BA59168C1802376A7BAFA6799F3900DFC93D6536C179
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target runtime/node_modules/aws-ssl-profiles/lib/profiles/ca/proxies.js
- Size 7KB
- SHA256 3ea4f0b5bb0b3aaf22143c6b0bc03ffea27c1e0223eb645062fab8bd402d7b18
- MD5 0d150dd8c891b6142312a809f6006bfe
- SHA1 0eb1cd464698939f8bc39cbd923ffef9a733e688
- SHA512 a35ae1aff0b739b73ea5716b0f4a75671364263ec7c0e9e72fe63d2f5ab964f7260c87f43b0f8a5d26d7a11b1bf4819686f859cab57754992cf467ecc8cd3bf1
- SSDEEP 192:KPRzt3RN4rxizrywbiD61lvQKLmY1gA877:ORztBN4rzweqlNmsgA+
- TLSH T16EF1E5A28E17687D62D7C1D383FA8666886807375977AFC2385E24049FC87CE136C4B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target runtime/node_modules/body-parser/index.js
- Size 976B
- SHA256 4d33d19d4ce36726988a1fa508f4d6f15254cc52fe95b777b30f49d97d825668
- MD5 0156a883331a66e8b2ce1c05695067ff
- SHA1 022e082291565813259e7173f14c747bd70edbe0
- SHA512 6cc0e42e66512e605da25d86a6e81c85fbbfa5504abaa8689c3054b0d86ba63443b8773a434307aba1a53853c3dd2ace24b05ab04e3a27cee53888c496b4183d
- TLSH T1F811D08C120D72A3CA570E7C455ED597DA9E8355227AA81B367223F93D3445C0603FF9
- MD5 SHA1 SHA512 TLSH
Score3/10